Forums Forums Search & Filter Pro Urgent Support required. I have an unwanted post arising due to this plugin.

Viewing 10 posts - 1 through 10 (of 10 total)
  • Anonymous
    #245669

    I have created a search and filter form that filters posts on the basis of tags, date range, categories, Posts order, etc. I just saw an unwanted post in the search result that I have not posted and is not there when I search for posts in WordPress dashboard. My whole website is in English. This post is appearing out of nowhere in french. Neither I’m able to remove this. I think its a security bug in the plugin. Please have a look at the following link. This is a very crucial issue for my website.

    https://focusmerit.com/all-in-one-current-affairs/

    Search for posts from 15 May.

    This is the title of the post: Abcoeur Site De Rencontre Gratuite Hommes Et Femmes Com

    If you check the below link. it is a monthly archive of may current affairs

    https://focusmerit.com/may-current-affairs-2020/

    Here you will not find that unknown post. Even I searched it in my WordPress dashboard. There is no such post. But if you search using https://focusmerit.com/all-in-one-current-affairs/ it will automatically appear on 15th may 2020. If you click on that post, I get a 404 page not found.

    Please resolve this issue. It could a security bug in this plugin.
    Eagerly waiting for your reply.

    Ross Moderator
    #245689

    Hi Gurpreet

    Just to confirm, was this post created by you or your site at some point?

    Could it be in the trash in wp-admin, or set to private?

    Did you check the posts tab in your search form, and check the post status thats included?

    Thanks

    Anonymous
    #245705
    This reply has been marked as private.
    Anonymous
    #245706
    This reply has been marked as private.
    Ross Moderator
    #245720
    This reply has been marked as private.
    Anonymous
    #245730
    This reply has been marked as private.
    Ross Moderator
    #245733

    Ok I can’t see much more than you mention.

    Only that the page works when you are not logged in, and doesn’t work when logged in – so I guess they are hiding the page somehow from an admin user….

    I see you are using Elementor which recently suffered from a large scale targetted attack:
    https://www.wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk/

    It is probably more likely that your site was compromised from this.

    Can you get your host to do a security scan on your site? Have you let them know it was breached?

    Thanks

    Anonymous
    #245768
    This reply has been marked as private.
    Ross Moderator
    #245769
    This reply has been marked as private.
    Ross Moderator
    #245771
    This reply has been marked as private.
Viewing 10 posts - 1 through 10 (of 10 total)